Attempted RPC Attack

  • Thread starter Thread starter RHinNC
  • Start date Start date
R

RHinNC

I do not have the virus, but am curious. How can I tell if my PC was
unsuccessfully attacked? Is there a log of attempted hits somewhere?

TIA
 
Thanks Chris, I am "stealthy" but wonder if there is a log on my system that
records the "probing".
 
Don't worry, you were probed. Just about every computer (IP address/Router,
etc...) attached to the internet, will be probed. That's the nature of the
worm. It infects one host, then searches that host's network (read: ISP)
for other open ports. It's basically an exponential expansion that clogs
bandwidth, nothing more. Those of us that cannot be infected, still have to
suffer the consequences of very slow internet speed as more unwitting people
get the worm. CodeRed springs to mind...

I found several (and still am) probes on port 135 (which I have blocked, in
my router's setup) in my router's log. Other people, on my network are
infected. Did an ARIN on all of the IP's and, sure enough, they are on my
network.


-
RHinNC stood up at show-n-tell, in #[email protected], and
said:
Thanks Chris, I am "stealthy" but wonder if there is a log on my
system that records the "probing".
Click to expand...

--
Strontium

"You may be right! It's all a waste of time! I guess
that's just a chance I'm prepared to take....A danger
I'm prepared to face.....Cut to the chase." - RUSH
 
Back
Top